[Git][security-tracker-team/security-tracker][master] Reserve DLA-2135-1 for jackson-databind
Utkarsh Gupta
utkarsh at debian.org
Thu Mar 5 22:50:53 GMT 2020
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
81b2d3c0 by Utkarsh Gupta at 2020-03-06T04:20:44+05:30
Reserve DLA-2135-1 for jackson-databind
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[06 Mar 2020] DLA-2135-1 jackson-databind - security update
+ {CVE-2020-9546 CVE-2020-9547 CVE-2020-9548}
+ [jessie] - jackson-databind 2.4.2-2+deb8u12
[05 Mar 2020] DLA-2134-1 pdfresurrect - security update
{CVE-2020-9549}
[jessie] - pdfresurrect 0.12-5+deb8u1
=====================================
data/dla-needed.txt
=====================================
@@ -18,8 +18,6 @@ amd64-microcode (Anton Gladky)
ansible (Mike Gabriel)
NOTE: 20200219: no upstream fixes yet
--
-jackson-databind (Utkarsh Gupta)
---
libmatio (Adrian Bunk)
NOTE: fairly high number of open issues. Not sure why we never had a look at them.
NOTE: triage work needed, help security team for fixes if needed.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81b2d3c0df2600dd5782904d08bbef7b9fad9476
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81b2d3c0df2600dd5782904d08bbef7b9fad9476
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200305/3f79b5ed/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list